ID
Product
Idonate
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 5Low 0
Watch
Add Idonate to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4522 | 6.5 | Nov 7 | IDonate 2.0.0 - 2.1.9 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion via admin_post_donor_delete Function Affected: 2.0.0 before 2.1.10 |
| CVE-2025-4523 | 6.5 | Aug 1 | IDonate 2.0.0 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via admin_donor_profile_view Function Affected: 2.0.0 before 2.1.10 |
| CVE-2025-11154 | 5.4 | Oct 27 | IDonate < 2.1.13 - Unauthenticated User Deletion Affected: before 2.1.13 |
| CVE-2025-67583 | 5.3 | Dec 9 | WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability Affected: before 2.1.16 |
| CVE-2025-12877 | 5.3 | Nov 22 | IDonate – Blood Donation, Request And Donor Management System <= 2.1.15 - Missing Authorization to Unauthenticated Arbitrary Post Deletion Affected: before 2.1.16 |
Showing 5